Vulnerability · Published May 5, 2022 · Assigned by mitre

CVE-2022-29340

High 7.5

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.2%top 31.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/gpac/gpac/issues/2163 x_refsource_MISC
https://github.com/gpac/gpac/commit/37592ad86c6ca934d34740012213e467acc4a3b0 x_refsource_MISC